CVE-2016-5312

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary…

published April 14, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS
—
EPSS
54%
Percentile
99.0
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.53982 · 99.0th percentile
Published
2017-04-14T18:00Z
EPSS history
Timeline
  • 22 SEP 03:13Z
    EPSS moved 54% → 40%
    epss
  • 06 SEP 03:09Z
    EPSS moved 54% → 40%
    epss
  • 30 AUG 15:32Z
    EPSS moved 40% → 54%
    epss
  • 29 AUG 04:13Z
    EPSS moved 54% → 40%
    epss
  • 14 APR 18:00Z
    Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary…
    cvelistv5